3bba8e0acca28dd40de8c951b34adc42fd950e83c54bcd121f9167386ec23d61 | Triage

Analysis

max time kernel
117s
max time network
121s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
30/12/2023, 20:48

Sharing

Report Analysis Logs

General

Target

1c29050eb34eb6d4a910695658b1c130.pdf
Size

6KB
MD5

1c29050eb34eb6d4a910695658b1c130
SHA1

d1ee5d9ccf93d1afeeef29ab940110bcd5144d36
SHA256

3bba8e0acca28dd40de8c951b34adc42fd950e83c54bcd121f9167386ec23d61
SHA512

f3ce634b19c6cc47d7b82cf380ab3e9675c6c84c4c9c99980c9e5d91b29b1f678e9ca0e50a4db11e613c9bbca3ffc48945388b6dff0fd21e79ec81022dfc4665
SSDEEP

192:M2RHQAXMtVaVriMQKfSdsAOSxbEyTtC6hSy1H:TQOMzaVjSdsAnxbEetCUSUH

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2224	AcroRd32.exe

Suspicious use of SetWindowsHookEx 4 IoCs

pid	Process
2224	AcroRd32.exe
2224	AcroRd32.exe
2224	AcroRd32.exe
2224	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\1c29050eb34eb6d4a910695658b1c130.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2224

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
b67440cb9ddff1bfeb4f4bc886d9298c

SHA1
88ce883b6551cb9934d53adec0b77cdfb53ef304

SHA256
1b92fb9ba27e46617d25cf7bef954b0b2edfbaa1d5cb65f51f92afe4fa9d2ec8

SHA512
6e4d4f70b76302baecae5e3b8b26a0d359ac726971ba568a3179539432878de3969d657522d977e429a0720a793bed268364f06d96e756fb7ddb85065f242672

Download Submit